Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
File:                     92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (raw, json)
Hash identifier:          xX6xLmXsGMhA6ynOHDJr+09/J6zrlE/mAc8SSCuWzQ4=
Subject key identifier:   06:21:3C:3F:4B:7E:80:EB:74:D1:BB:1F:CE:7D:76:E7:0E:B1:E5:A0
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       0678
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
Signing time:             Fri 24 Jul 2026 23:44:10 +0000
ROA not before:           Fri 24 Jul 2026 23:44:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     142421
IP address blocks:        103.168.40.0/23 maxlen: 24
                          2001:df6:cc80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Jul 24 23:44:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a63f8c9-5116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:ad:e6:04:8c:cc:4a:0e:4b:94:ea:50:69:
                    b2:b4:70:61:da:9b:21:ad:3c:a9:72:bb:6c:da:83:
                    1f:79:7d:8f:87:28:46:91:4d:f8:14:d1:d2:04:ad:
                    ca:f0:22:77:0c:61:23:63:d7:d4:2d:35:b0:3f:0e:
                    9b:07:e4:c2:02:6e:f8:fb:62:54:63:ed:f2:fb:fa:
                    a8:c1:0e:2d:e0:1f:d9:43:ce:6e:cf:ee:79:e8:a7:
                    b0:79:d8:3f:cb:ea:d2:ee:b4:0a:af:37:04:b5:e7:
                    db:48:eb:40:3b:2c:41:7e:e2:88:fe:4f:b8:d6:64:
                    04:ab:91:5c:cc:d8:a6:8f:20:ed:7e:e7:bb:16:5c:
                    62:f8:8e:35:8c:77:a4:e7:6c:09:2c:de:93:5c:a8:
                    7a:7f:75:e8:d7:a9:97:06:df:37:2a:3f:7b:ab:71:
                    dd:f2:71:44:e7:f0:66:a2:d3:b5:5b:52:27:a0:79:
                    cd:01:54:9d:b7:e2:c5:c0:bc:55:19:30:1c:fc:d9:
                    10:e3:6f:11:5d:ab:46:79:be:ee:69:43:05:39:cc:
                    a8:66:a1:6c:f6:5d:14:0b:9f:7d:b9:fc:c7:11:f0:
                    57:45:8f:e8:f0:4a:84:78:26:a7:f5:49:3e:0e:7c:
                    bf:67:42:d8:31:52:b9:98:ad:ac:9b:08:70:99:40:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:3C:3F:4B:7E:80:EB:74:D1:BB:1F:CE:7D:76:E7:0E:B1:E5:A0
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.40.0/23
                IPv6:
                  2001:df6:cc80::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:32:c3:e7:5e:75:ec:ad:11:fa:64:71:83:07:2b:43:2c:87:
         69:90:2d:7f:c1:a2:fa:03:86:61:f2:68:d0:62:1c:5a:78:8d:
         e2:dd:a1:ca:97:e0:ad:cc:f0:48:84:38:69:8a:ef:d2:bf:cc:
         fe:93:fc:c2:e8:6d:53:03:90:79:cf:5a:21:0f:fa:2d:88:5f:
         33:a8:7e:e3:c2:fa:24:c1:ef:f7:47:ef:74:07:ff:bd:8c:85:
         14:29:48:4a:9c:56:63:e9:01:63:76:07:eb:bd:cb:06:e5:5f:
         cd:4c:1c:4b:51:a6:7c:c0:64:51:63:f6:4d:7c:10:af:06:60:
         db:41:f7:cf:9a:91:45:45:30:78:ac:0f:b9:5b:7e:50:0c:28:
         5c:c5:d6:cf:13:42:fc:4a:6b:f6:4f:68:4c:1c:5f:22:47:79:
         d9:48:99:a1:2c:95:08:f4:a1:fb:fd:2c:47:fc:82:2e:67:8e:
         db:e6:3e:bd:33:1e:fb:fe:73:c4:ab:b1:7d:63:14:d8:50:ed:
         ba:4c:c2:91:1d:49:7c:ae:a3:40:dc:06:ec:7f:cf:d0:51:34:
         c5:fe:51:25:ef:66:e7:45:15:93:88:6c:4e:2e:f2:49:0b:72:
         d9:f1:82:dd:63:48:63:f4:86:e6:75:5e:92:7f:07:3c:e0:98:
         70:53:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:33 2026 by rpki-client